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Top Stories 

• Plains All American Pipeline officials reported June 10 that the clean-up of oil along the 
Santa Barbara County, California coast has cost over $60 million, peaking at $3 million a 
day. - Los Angeles Times (See item 4 ) 

• The center tube of the Lincoln Tunnel in New York City was closed for several hours June 
10 and about 31 people were injured after two buses collided. - WNBC 4 New York City 
(See item IT) 

• Several miles of Route 374 east of Dannemora to West Plattsburgh, and Saranac Central 
School District in New York were closed June 1 1 as State authorities continued to search 
for 2 prisoners that escaped the Clinton Correctional Facility. - USA Today (See item 20 ) 

• Security researchers from Kaspersky Lab discovered that the Duqu advanced persistent 
threat (APT) group had used a new platform to compromise the lab’s systems along with 
about 100 other victims between 2014 - 2015, most of whom were related to P5 + 1 talks 
over Iran’s nuclear program. - Threatpost (See item 26 ) 
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Energy Sector 



1. June 11, Associated Press - (Montana) EPA’s rule on Colstrip coal plant pollution 
struck down. A Federal appeals court struck down 2012 U.S. Environmental 
Protection Agency haze pollution rules June 9 that aimed to protect regional air quality 
by requiring the best available technology for use in older coal plants. Judges stated 
that the pollution rules arbitrarily required companies such as PPL Montana to install 
expensive pollution controls without assurance of improvements in visibility. 

Source: http://www.spokesman.com/stories/2015/iun/ll/epas-rule-on-colstrip-coal- 
plant-pollution-struck/ 

2. June 10, Palm Beach Post - (Florida) Skimming devices found at three more Palm 
Beach County gas stations. Florida’s Department of Agriculture and Consumer 
Services reported June 10 that 4 more skimming devices were found and removed from 
gas stations in Jupiter, Boca Raton, and West Palm Beach, bringing the total number of 
skimmers found since April to 15. 

Source: http://protectingyourpocket.blog.pahiibeachpost.com/2015/06/10/skimming- 
devices-found-at-three-more-palm-beach-county-gas-stations/ 

3. June 10, Harrisburg Patriot-News - (Pennsylvania) Federal officials investigating 
pipeline explosion in Pennsylvania. Federal officials were investigating the cause of a 
June 9 gas rupture and fire in Unityville, Pennsylvania that displaced about 130 people 
after a Williams-owned 24-inch natural gas transmission pipeline failed. The company 
reported that it had quickly stopped the rupture and would work with authorities to 
determine the cause of the failure and ensure the pipeline’s operational integrity. 
Source: 

http://www.pennlive.com/midstate/index.ssf/2015/06/federal officials investigatin l.h 
tml 

4. June 10, Los Angeles Times - (California) Officials: cost to clean oiled Santa 
Barbara beaches exceeds $60 million. Plains All American Pipeline officials reported 
June 10 that the clean-up of oil along the Santa Barbara Coast has cost over $60 
million, peaking at $3 million a day, and that workers have cleaned up 76 percent of 
damaged beach stretches. Costs could continue to rise due to possible financial damage 
claims and potential Clean Water Act violations stemming from the 101,000-gallon 
crude oil spill in May. 

Source: http://www.latimes.com/local/lanow/la-me-santa-barbara-oil-spill-cleanup- 
cost-20150610-story.html 

For another story, see item 27 
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Chemical Industry Sector 

5. June 10, Associated Press - (Pennsylvania) Thousands of fish reported killed after 
chemical plant fire. Authorities reported June 10 that thousands of dead fish were 
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found over a 10 - 15 mile span following possible contamination from a June 8 fire at 
Miller Chemical and Fertilizer Plant in Conewago, Pennsylvania. Conservation officers 
are investigating the incident. 

Source: http://www.witf.org/news/2015/06/thousands-of-fish-reported-killed-after- 
chemical-plant-fire.php 



[ Return to top ] 

Nuclear Reactors, Materials, and Waste Sector 

6. June 11, KNBC 4 Los Angeles - (California) Nuclear work tool stolen in Riverside; 
$750 reward offered. Authorities are offering a $750 reward for the return of a 
portable nuclear density gauge stolen from a truck parked near the University of 
California Riverside campus June 10. The gauge contains small amounts of radioactive 
material and is no danger to the public when used properly. 

Source: http://www.nbclosangeles.com/news/local/Nuclear-Work-Tool-Stolen-in- 
Riverside-75Q-Reward-Offered-3Q6856271.html 

7. June 10, Santa Fe New Mexican - (New Mexico) Report blasts oversight of nuke lab 
contractors. Findings from a report released June 10 by the U.S. Government 
Accountability Office faulted the U.S. Department of Energy’s National Nuclear 
Security Administration (NNSA) for recent failures at nuclear facilities, claiming that 
the agency lacked qualified staff members to oversee contractors at nuclear facilities, 
and lacked guidelines for contractors. The NNSA reported that it agreed with the report 
findings and will work to address the issues. 

Source: http://www.santafenewmexican.com/news/local news/report-blasts-agency-s- 
oversight-of-contractors-managing-nuke-labs/article 22a96765-aacb-54a5-9115- 
003c2b24d4cf.html 



For another story, see item 27 
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Critical Manufacturing Sector 

8. June 11, Charleston Post and Courier - (South Carolina) Nitrogen line failure blows 
out crater at North Charleston Boeing plant. Boeing South Carolina officials 
reported that a nitrogen line failed and ruptured at the company’s Charleston plant June 
11. No injuries were reported, the nitrogen lines were immediately shut off, and an 
investigation is being conducted into the incident. 

Source: http://www.postandcourier.com/article/20150611/PC16/150619887/10Q5/ 

9. June 10, WDTN 2 Dayton - (Ohio) Gasoline odor prompts Fuyao evacuation. Fuyao 
Glass Manufacturing in Moraine, Ohio evacuated employees June 10 due to reports of 
gasoline odors in the facility that the company believes were from old pipes. No 
workers were injured, and authorities are investigating the cause of the odor. 

Source: http://wdtn.com/2015/06/10/gasoline-odor-prompts-fuyao-evacuation/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

10. June 11, WCPO 9 Cincinnati - (Indiana) Sock Hat Bandit: man matching suspect’s 
description accused of robbing Indiana bank. Anderson, Indiana Police Department 
officials reported that a man matching the description of the suspect dubbed the “Sock 
Hat Bandit” struck the town’s PNC Bank June 10, marking his ninth robbery across 
Ohio, Kentucky, and Indiana. The FBI is offering a $5,000 reward for information 
leading to his arrest. 

Source: http://www.wcpo.com/news/state/state-indiana/sock-hat-bandit-man-matching- 
suspects-description-accused-of-robbing-indiana-bank 

For another story, see item 2 
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Transportation Systems Sector 

11. June 11, WNBC 4 New York City - (New York; New Jersey) 31 hurt when NJ Transit 
bus bumps tour bus carrying students in Lincoln Tunnel: officials The center tube 
of the Lincoln Tunnel in New York City was closed for several hours June 10 and 
about 31 people were injured after a New Jersey Transit bus with about 60 passengers 
crashed into a Canada-based tour bus that was carrying more than 2 dozen students. 
None of the students were reported injured in the accident. 

Source: http://www.nbcnewvork.com/news/local/Lincoln-Tunnel-Death-Bus-Crash- 
Police-306773321.html 

12. June 11, WKBW 7 Buffalo - (New York) Medical emergency diverts Southwest 
flight to Buffalo. Southwest Flight 2494 headed from Chicago Midway to Bradley- 
Hartford Airport in Connecticut made an emergency landing to Buffalo Niagara 
International Airport June 1 1 when a passenger suffered a serious medical emergency. 
The passenger was taken to a local hospital and the flight continued to his final 
destination. 

Source: http://www.wkbw.com/news/medical-emergency-diverts-southwest-fIight-to- 
buffalo 

13. June 10, W1BW 13 Topeka - (Kansas) 1-470 reopens after a semi shuts down EB 
lanes for over 4 hours. All eastbound lanes of Interstate 470 in Topeka reopened June 
10 after being shut down for nearly 4 hours as crews cleaned up the scene of a semi- 
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truck fire. No injuries were reported. 

Source: http://www.wibw.com/home/headlines/Semi-Fire-Closes-EB-I-470-near- 
Wanamaker-306855691.html 



For another story, see item 20 



[ Return to top ] 

Food and Agriculture Sector 

14. June 10, Associated Press - (Wisconsin) Wisconsin lifts its last 5 bird flu control 
zones. The Wisconsin Department Agriculture lifted 5 control zones June 10 around 
farms in Barron County that were once infected with the avian flu. Officials have not 
detected the bird flu since early May when a total of 2 million birds were euthanized. 
Source: http://foxllonline.com/2015/Q6/10/wisconsin-lifts-its-last-5-bird-flu-control- 
zones/ 

15. June 10, Associated Press - (Minnesota) Stearns County farm that was struck early 
by bird flu set to become Minnesota’s 2 nd to restock. The Minnesota Board of 
Animal Health reported June 10 that one of the first farms affected by bird flu in Sterns 
County is scheduled to resume production by restocking its turkeys. Fourteen other 
affected farms completed thorough disinfecting processes and are awaiting approval to 
resume production. 

Source: http://www.startribune.com/stearns-countv-farm-to-become-2nd-in-minnesota- 
to-restock/306820841/ 

T Return to top i 

Water and Wastewater Systems Sector 

See item 5 
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Healthcare and Public Health Sector 

16. June 10, Associated Press - (Nevada) Drug abuse crackdown leads to NV 
hydrocodone shortage. Increased Federal and State regulations regarding prescription 
drug abuse has led to a shortage of hydrocodone in Nevada, where the painkiller has 
been rescheduled as a class two narcotic. 

Source: http://www.kolotv.com/home/headlines/Drug-Abuse-Crackdown-Feads-to- 
NV -Hydrocodone- Shortage-3068 16581 .html 

17. June 10, KR1V 26 Houston - (Texas) ‘Data service outage’ forces Lyndon B. 
Johnson Hospital to divert incoming patients elsewhere. Officials announced June 
10 that Fyndon B. Johnson Hospital in Houston would be unable to accept patients for 
at least 14 hours due to a ‘data service outage’. Repairs are being made while several 
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core services, including commercial data and telephone service, remained off-line, 
forcing the hospital to divert ambulances and patients to alternative hospitals. 
Source: http://www.mvfoxhouston.com/story/2929121 1/data-service-outage-forces- 
lyndon-b-johnson-hospital-to-divert-patients-elsewhere 

For another story, see item 20 
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Government Facilities Sector 

18. June 11, K1R0 7 Seattle - (Washington) Driver arrested after 2 students killed, 2 
injured in Ferndale. Two Windward High School students were killed and 2 were 
injured in Tacoma after being struck by a vehicle while on a sidewalk for a physical 
education class June 10. 

Source: http://www.kirotv.com/news/news/car-hits-four-pedestrians-north- 
bellingham/nmZs9/ 

19. June 11, Associated Press - (Massachusetts) Several hurt in accident involving 
school bus. Nine people, including 3 students, were injured June 10 due to a head-on 
collision that involved a school bus in New Bedford, Massachusetts. 
Source: http://www.bostonherald.com/news opinion/local coverage/20 15/06/several h 
urt in accident involving school bus 

For additional stories, see items 20, 26, and 28 
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Emergency Services Sector 

20. June 11, USA Today - (New York) Manhunt focuses on prison area; Philly tip 
discredited. Several miles of Route 374 east of Dannemora to West Plattsburgh, and 
Saranac Central School District in New York were closed June 11 as State authorities 
investigated a new lead into the whereabouts of 2 escaped prisoners from the Clinton 
Correctional Facility June 6. Officials may reopen schools as early as June 12. 

Source: http://www.usatodav.eom/story/news/nation/2015/06/l 1/police-close-road- 
killers -manhunt/7 1051406/ 



21. June 10, New York Times - (New York) New York City to end contract with Rikers 
health care provider. The Mayor of New York announced June 10 that a contract with 
Corizon Health Inc., for health care at Rikers Island jail complex will not be renewed 
after an investigation revealed systemic oversights which may have contributed to up to 
12 inmate deaths and insufficient background checks of medical employees which 
allowed individuals with disciplinary problems and criminal convictions to be hired. 
Source: http://www.nvtimes.eom/2015/06/l l/nyregion/report-details-failings-of- 
corizon-rikers-island-health-provider.html? r=0 
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22. June 10, KOKI 23 Tulsa - (Oklahoma) Multiple injuries reported in Cimarron 
Correctional Facility riot. The Cimarron Correctional Facility in Cushing, Oklahoma 
remains in complete lock down June 10 after a fight between inmates resulted in 12 
injured prisoners. The facility security guards and Creek County crews were able to 
contain the incident. 

Source: http://www.fox23.com/news/news/local/officials-confirm-fight-cirnarron- 
correctional-faci/nmZzQ/ 

23. June 10, Reuters - (New York) U.S charges New York jail guards over 2012 
inmates death. A Manhattan U.S. Attorney reported June 10 that 2 jail guards from 
Riker’s Island Complex were arrested on Federal charges for allegedly assaulting and 
killing an inmate in late 2012. Both guards are expected to appear in court following 
their arrest. 

Source: http://www.reuters.com/article/2015/06/10/usa-crime-rikersisland- 
idUSLlN0YW2IG20150610 
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Information Technology Sector 

24. June 11, Securityweek - (International) Serious flaw in iOS mail app exposes users to 
phishing attacks. A Czech security researcher discovered a vulnerability in Apple’s 
iOS mobile operating system (OS) in which an attacker can create emails that load 
remote Hypertext Markup Language (HTML) content when opened, prompting users to 
input credentials that are sent back to the attacker. 

Source: http://www.securityweek.com/serious-flaw-ios-mail-app-exposes-users- 
phishing-attacks 

25. June 11, Softpedia - (International) Malvertising campaign hits Bejeweled Blitz 
game on Facebook, CNN Indonesia. Security researchers from Websense discovered 
a malvertising campaign impacting up to 50 million users a month that is distributed 
through popular online locations including the Bejeweled Blitz game on Facebook via 
the OpenX advertising platform and an old Adobe Flash Player glitch. The campaign 
directs users to a site hosting the Angler exploit kit (EK) and delivers payloads 
including ransomware, ad-fraud, backdoor, and malware downloaders. 

Source: http://news.softpedia.com/news/Malvertising-Campaign-Hits-Bejeweled-Blitz- 
Game-on-Facebook-CNN-Indonesia-484021.shtml 



26. June 10, Threatpost - (International) New APT Duqu 2.0 hits high-value victims, 
including Kaspersky Lab. Security researchers from Kaspersky Lab discovered that 
the Duqu advanced persistent threat (APT) group had used a new platform dubbed 
Duqu 2.0 to compromise the lab’s systems along with about 100 other victims between 
2014 - 2015, most of whom were related to P5 + 1 talks over Iran’s nuclear program. 
The APT group seeks to gain access to intellectual property by attacking systems using 
modules residing entirely in-memory via Windows zero-day vulnerabilities to inject a 
backdoor and a larger espionage platform with extensive capabilities. 
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Source: https://threatpost.com/duqu-resurfaces-with-new-round-of-victims-including- 
kaspersky-lab/1 13237 



27. June 10, SC Magazine - (International) Stuxnet still a threat to critical 

infrastructure. Findings from Kleissner & Associates “Internet Attacks Against 
Nuclear Power Plants” report revealed that the Stuxnet malware was found on at least 
153 devices worldwide in almost 5 years, at least 6 of which were running supervisory 
control and data acquisition (SC AD A) development software. The researchers 
reiterated the threat posed by malware developed on behalf of foreign nation states. 
Source: http://www.scmagazineuk.com/stuxnet-still-a-threat-to-critical- 
infrastructure/article/4 1 9802/ 



28. June 10, SC Magazine - (International) U.S. National Vulnerability Database 

vulnerable to XSS attack. A security consultant discovered that the National Institute 
of Standards and Technology’s National Vulnerability Database (NVD) housing 
common vulnerabilities and exposures (CVE) flaws is vulnerable to a cross-site 
scripting (XSS) attack by replacing the document object mode (DOM) with a phishing 
page to collect personal identifiable information (PH) and card information. NVD 
officials reported that the agency is working to address the issue. 

Source: http://www.scmagazineuk.com/us-national-vulnerability-database-vulnerable- 
to-xss-attack/article/4 19789/ 



29. June 10, Securityweek - (International) Weak remote access practices contributed to 
nearly all PoS breaches: Trustwave. Trustwave released a report revealing that 40 
percent of the 574 breaches the company investigated from 2014 were in point-of-sale 
(PoS) systems and that 94 percent of the incidents were a result of weak remote 
security and passwords. The retail sector comprised 43 percent of the PoS breach 
investigations, among other findings. 

Source: http://www.securitvweek.com/weak-remote-access-practices-contributed- 
nearly-all-pos-breaches-trustwave 

30. June 10, Threatpost - (International) Microsoft brings HSTS to Windows 7 and 8.1. 
Microsoft released patches introducing Hypertext Transfer Protocol (HTTP) Strict 
Transport Security (HSTS) to users running Internet Explorer 1 1 on Windows 7 and 
8.1, in an effort to increase security against man-in-the-middle (MitM) Web sessions 
and attacks using invalid digital certificates. The protocol forces HTTP sessions to be 
sent over HTTP Secure (HTTPS) connections according to a list of preloaded sites 
supporting it. 

Source: https://threatpost.eom/microsoft-brings-hsts-to-windows-7-and-8-l/l 13258 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

See item 25 
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Commercial Facilities Sector 

31. June 11, Associated Press - (Connecticut) Woman in serious condition in apartment 
fire, 13 displaced. A June 10 apartment fire in Hartford, Connecticut displaced 13 
families and sent 1 resident to an area hospital after the blaze damaged the apartment 
building. An investigation is ongoing to determine the cause of the fire. 

Source: http://www.wfsb.com/storv/29294118/woman-in-serious-condition-in- 
apartment-fire- 1 3-displaced 

32. June 11, News 13 Orlando - (Florida) Just opened, souvenir shop in Daytona Beach 
Shores burns in fire. The Rusty Cat USA gift shop in Daytona Beach Shores sustained 
extensive damage June 10 after a fire began on the roof of the building and prompted 
the evacuation of store employees. Fire crews contained the blaze and an investigation 
is ongoing to determine the cause. 

Source: 

http://www.mynewsl3.com/content/news/cfnewsl3/news/article.html/content/news/arti 
cles/cfn/2015/6/ll/daytona beach shores.html 

33. June 11, Bay News 9 St. Petersburg - (Florida) Overnight fire tears through Ybor 
City warehouse. Over 60 firefighters responded to a 2-alarm fire June 10 at a multi- 
business warehouse in Ybor City, Florida, that destroyed the building. Crews remained 
on site for several hours containing the fire and an investigation is ongoing to 
determine the cause. 

Source: 

http://www.bavnews9.com/content/news/bavnews9/news/article.html/content/news/arti 
cles/bn9/2015/6/ll/ovemight fire tears.html 

34. June 10, Colorado Springs Gazette - (Colorado) Fire forces evacuation of Colorado 
Springs taco shop. A two-alarm fire at Nacos Tacos in Colorado Springs prompted the 
evacuation of 6 businesses after starting in a heating, ventilating, and air conditioning 
unit on the roof of the restaurant June 10. Fire crews contained the incident and no 
injuries were reported. 

Source: http://gazette.com/fire-forces-evacuation-of-colorado-springs-taco- 
shop/article/1553517 



For another story, see item 29 
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Dams Sector 

Nothing to report 
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Contact Information 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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